๐บ๐ธ
146.190.137.16
10 Aug 2026
2026-08-10T12:16:28.487970-04:00 nostromo.teiken.net kernel: [257625.672412] syn_limit:IN=en-wan OUT ...
show more
2026-08-10T12:16:28.487970-04:00 nostromo.teiken.net kernel: [257625.672412] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21430 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:29.501628-04:00 nostromo.teiken.net kernel: [257626.686068] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21431 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:30.521840-04:00 nostromo.teiken.net kernel: [257627.706267] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=146.190.137.16 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=56 ID=21432 DF PROTO=TCP SPT=45016 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-10T12:16:31.532523-04:00 nostromo.teiken.net kernel: [257628.716943] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:
...
show less
Port Scan
๐จ๐ณ
14.103.118.106
10 Aug 2026
2026-08-10T10:14:04.715713-04:00 nostromo.teiken.net sshd-session[415128]: Invalid user minecraft fr ...
show more
2026-08-10T10:14:04.715713-04:00 nostromo.teiken.net sshd-session[415128]: Invalid user minecraft from 14.103.118.106 port 35148
2026-08-10T10:14:04.740046-04:00 nostromo.teiken.net sshd-session[415128]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.118.106
2026-08-10T10:14:06.685281-04:00 nostromo.teiken.net sshd-session[415128]: Failed password for invalid user minecraft from 14.103.118.106 port 35148 ssh2
2026-08-10T10:19:41.588476-04:00 nostromo.teiken.net sshd-session[415640]: Invalid user suporte from 14.103.118.106 port 44076
2026-08-10T10:19:41.613148-04:00 nostromo.teiken.net sshd-session[415640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=14.103.118.106
2026-08-10T10:19:43.871146-04:00 nostromo.teiken.net sshd-session[415640]: Failed password for invalid user suporte from 14.103.118.106 port 44076 ssh2
...
show less
Brute-Force
SSH
๐บ๐ธ
206.46.35.250
10 Aug 2026
2026-08-10T07:44:56.881301-04:00 nostromo.teiken.net kernel: [241334.227410] syn_limit:IN=en-wan OUT ...
show more
2026-08-10T07:44:56.881301-04:00 nostromo.teiken.net kernel: [241334.227410] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=6948 DF PROTO=TCP SPT=53879 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:58.617024-04:00 nostromo.teiken.net kernel: [241335.963117] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=48690 DF PROTO=TCP SPT=36013 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:58.818791-04:00 nostromo.teiken.net kernel: [241336.164909] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.46.35.250 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=58 ID=52855 DF PROTO=TCP SPT=38561 DPT=4567 WINDOW=29200 RES=0x00 SYN URGP=0
2026-08-10T07:44:59.634377-04:00 nostromo.teiken.net kernel: [241336.980462] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:0
...
show less
Port Scan
๐ฉ๐ช
45.77.64.215
10 Aug 2026
2026-08-10T07:41:51.002614-04:00 rocinante.teiken.net kernel: [250953.364218] syn_limit:IN=ens5 OUT= ...
show more
2026-08-10T07:41:51.002614-04:00 rocinante.teiken.net kernel: [250953.364218] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=65267 DF PROTO=TCP SPT=50106 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.433999-04:00 rocinante.teiken.net kernel: [250953.795636] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=49 ID=1011 DF PROTO=TCP SPT=41964 DPT=443 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:52.015790-04:00 rocinante.teiken.net kernel: [250954.377397] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=45.77.64.215 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=65268 DF PROTO=TCP SPT=50106 DPT=80 WINDOW=42340 RES=0x00 SYN URGP=0
2026-08-10T07:41:52.459675-04:00 rocinante.teiken.net kernel: [250954.821305] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:0
...
show less
Port Scan
๐ฉ๐ช
2001:19f0:6c01:1ac5:5400:6ff:fe82:d399
10 Aug 2026
2026-08-10T07:41:50.695594-04:00 rocinante.teiken.net kernel: [250953.056702] syn_limit:IN=ens5 OUT= ...
show more
2026-08-10T07:41:50.695594-04:00 rocinante.teiken.net kernel: [250953.056702] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=556101 PROTO=TCP SPT=44120 DPT=80 WINDOW=43200 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.126275-04:00 rocinante.teiken.net kernel: [250953.487343] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=49 FLOWLBL=960960 PROTO=TCP SPT=46990 DPT=443 WINDOW=43200 RES=0x00 SYN URGP=0
2026-08-10T07:41:51.757291-04:00 rocinante.teiken.net kernel: [250954.118381] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2001:19f0:6c01:1ac5:5400:06ff:fe82:d399 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=50 FLOWLBL=305503 PROTO=TCP SPT=44120 DPT=80 WINDOW=43200 RES=0x00 SYN UR
...
show less
Port Scan
๐ฎ๐ณ
2400:6180:100:d0:0:1:75a6:f001
10 Aug 2026
2026-08-10T06:31:42.859604-04:00 rocinante.teiken.net kernel: [246745.284101] syn_limit:IN=ens5 OUT= ...
show more
2026-08-10T06:31:42.859604-04:00 rocinante.teiken.net kernel: [246745.284101] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0100:00d0:0000:0001:75a6:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=46 FLOWLBL=429157 PROTO=TCP SPT=12876 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0
2026-08-10T06:31:42.859779-04:00 rocinante.teiken.net kernel: [246745.284238] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0100:00d0:0000:0001:75a6:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=46 FLOWLBL=113089 PROTO=TCP SPT=12898 DPT=53 WINDOW=64800 RES=0x00 SYN URGP=0
2026-08-10T06:31:42.860476-04:00 rocinante.teiken.net kernel: [246745.287306] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:86:dd SRC=2400:6180:0100:00d0:0000:0001:75a6:f001 DST=2600:1f18:0596:2501:0000:0000:0000:1001 LEN=80 TC=0 HOPLIMIT=46 FLOWLBL=902111 PROTO=TCP SPT=12878 DPT=53 WINDOW=64800 RES=0x00 SYN URG
...
show less
Port Scan
๐บ๐ธ
52.173.164.19
10 Aug 2026
rocinante.teiken.net:80 52.173.164.19:60108 - - [10/Aug/2026:02:29:46 -0400] "GET /.git/HEAD HTTP/1. ...
show more
rocinante.teiken.net:80 52.173.164.19:60108 - - [10/Aug/2026:02:29:46 -0400] "GET /.git/HEAD HTTP/1.1" 301 589 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36"
rocinante.teiken.net:80 52.173.164.19:60116 - - [10/Aug/2026:02:29:48 -0400] "GET /.git/config HTTP/1.1" 301 593 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
rocinante.teiken.net:80 52.173.164.19:60112 - - [10/Aug/2026:02:29:48 -0400] "GET /.git/logs/HEAD HTTP/1.1" 301 599 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"
rocinante.teiken.net:80 52.173.164.19:60128 - - [10/Aug/2026:02:29:50 -0400] "GET /.git/refs/heads/master HTTP/1.1" 301 615 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14.4; rv:125.0) Gecko/20100101 Firefox/125.0"
rocinante.teiken.net:80 52.173.164.19:60800 - - [10/Aug/2026:02:29:50 -0400] "GET /.git/
...
show less
Web App Attack
๐ฏ๐ต
133.18.105.193
10 Aug 2026
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:49 -0400] "GET /form/index.php HTTP/1 ...
show more
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:49 -0400] "GET /form/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:52 -0400] "GET /mail.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:27:57 -0400] "GET /mailform.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:28:00 -0400] "GET /postmail/postmail.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 133.18.105.193:54716 - - [09/Aug/2026:23:28:02 -0400] "GET /qaform.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken
...
show less
Web App Attack
๐ฏ๐ต
2406:8c00:0:3447:133:18:105:193
10 Aug 2026
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:14 -0400] "GET /cont ...
show more
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:14 -0400] "GET /contact.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:16 -0400] "GET /contactus.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:30 -0400] "GET /contact.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:33 -0400] "GET /contact/index.php HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
www.teiken.net:443 2406:8c00:0:3447:133:18:105:193:55458 - - [09/Aug/2026:23:27:35 -0400] "GET /inquiry.php HTTP/1.1" 404 555 "-" "Mozilla/5
...
show less
Web App Attack
๐บ๐ธ
154.29.72.89
10 Aug 2026
2026-08-09T23:25:27.538017-04:00 nostromo.teiken.net kernel: [211365.178320] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T23:25:27.538017-04:00 nostromo.teiken.net kernel: [211365.178320] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x02 PREC=0x00 TTL=121 ID=23173 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0
2026-08-09T23:25:28.534486-04:00 nostromo.teiken.net kernel: [211366.177551] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x02 PREC=0x00 TTL=121 ID=23175 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 CWR ECE SYN URGP=0
2026-08-09T23:25:34.538005-04:00 nostromo.teiken.net kernel: [211372.177393] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=154.29.72.89 DST=173.52.106.128 LEN=52 TOS=0x00 PREC=0x00 TTL=121 ID=23177 DF PROTO=TCP SPT=52784 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T23:25:51.535192-04:00 nostromo.teiken.net kernel: [211389.178033] syn_limit:IN=en-wan OUT= MAC=00
...
show less
Port Scan
๐บ๐ธ
34.56.151.211
10 Aug 2026
2026-08-09T23:01:08.318146-04:00 nostromo.teiken.net kernel: [209905.973719] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T23:01:08.318146-04:00 nostromo.teiken.net kernel: [209905.973719] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=22987 DF PROTO=TCP SPT=56700 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T23:01:08.318559-04:00 nostromo.teiken.net kernel: [209905.973790] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=35909 DF PROTO=TCP SPT=56716 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T23:01:08.318656-04:00 nostromo.teiken.net kernel: [209905.973843] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.56.151.211 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=44126 DF PROTO=TCP SPT=56796 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T23:01:08.318734-04:00 nostromo.teiken.net kernel: [209905.973868] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:
...
show less
Port Scan
๐บ๐ธ
159.203.70.134
10 Aug 2026
2026-08-09T22:44:22.478033-04:00 nostromo.teiken.net kernel: [208900.140374] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T22:44:22.478033-04:00 nostromo.teiken.net kernel: [208900.140374] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54544 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:44:23.498009-04:00 nostromo.teiken.net kernel: [208901.161582] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54545 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:44:24.518215-04:00 nostromo.teiken.net kernel: [208902.185239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=159.203.70.134 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54546 DF PROTO=TCP SPT=41044 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:44:25.475220-04:00 nostromo.teiken.net kernel: [208903.142234] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:
...
show less
Port Scan
๐ณ๐ฑ
31.14.32.4
10 Aug 2026
2026-08-09T22:31:38.668500-04:00 rocinante.teiken.net kernel: [217941.623350] syn_limit:IN=ens5 OUT= ...
show more
2026-08-09T22:31:38.668500-04:00 rocinante.teiken.net kernel: [217941.623350] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=14984 DF PROTO=TCP SPT=44756 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:31:38.668653-04:00 rocinante.teiken.net kernel: [217941.623726] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=8544 DF PROTO=TCP SPT=44730 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:31:38.668693-04:00 rocinante.teiken.net kernel: [217941.626003] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=31.14.32.4 DST=192.168.16.119 LEN=60 TOS=0x08 PREC=0x20 TTL=53 ID=9866 DF PROTO=TCP SPT=44766 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T22:31:38.668722-04:00 rocinante.teiken.net kernel: [217941.628670] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:
...
show less
Port Scan
๐บ๐ธ
142.93.191.239
10 Aug 2026
2026-08-09T21:57:56.308037-04:00 nostromo.teiken.net kernel: [206114.001239] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T21:57:56.308037-04:00 nostromo.teiken.net kernel: [206114.001239] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22706 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T21:57:57.318009-04:00 nostromo.teiken.net kernel: [206115.006533] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22707 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T21:57:58.338013-04:00 nostromo.teiken.net kernel: [206116.030104] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=142.93.191.239 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=55 ID=22708 DF PROTO=TCP SPT=43996 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T21:57:59.310499-04:00 nostromo.teiken.net kernel: [206117.004570] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:
...
show less
Port Scan
๐ฌ๐ง
185.130.187.14
09 Aug 2026
rocinante.teiken.net:80 185.130.187.14:49381 - - [09/Aug/2026:19:47:18 -0400] "GET /.env HTTP/1.1" 3 ...
show more
rocinante.teiken.net:80 185.130.187.14:49381 - - [09/Aug/2026:19:47:18 -0400] "GET /.env HTTP/1.1" 301 560 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:55132 - - [09/Aug/2026:19:47:19 -0400] "GET /.env.backup HTTP/1.1" 301 574 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:26892 - - [09/Aug/2026:19:47:19 -0400] "GET /.env.old HTTP/1.1" 301 568 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:11881 - - [09/Aug/2026:19:47:20 -0400] "GET /.env.example HTTP/1.1" 301 576 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:35573 - - [09/Aug/2026:19:47:20 -0400] "GET /.env.save HTTP/1.1" 301 570 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:1310 - - [09/Aug/2026:19:47:21 -0400] "GET /.env.production HTTP/1.1" 301 582 "-" "Mozilla/5.0 (compatible; EnvCracker/4.0)"
rocinante.teiken.net:80 185.130.187.14:232
...
show less
Web App Attack
๐ฉ๐ช
93.159.123.181
09 Aug 2026
2026-08-09T19:13:11.858017-04:00 nostromo.teiken.net kernel: [196229.645598] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T19:13:11.858017-04:00 nostromo.teiken.net kernel: [196229.645598] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=21446 DF PROTO=TCP SPT=61183 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T19:13:12.872499-04:00 nostromo.teiken.net kernel: [196230.664570] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=21447 DF PROTO=TCP SPT=61183 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T19:13:13.424084-04:00 nostromo.teiken.net kernel: [196231.216155] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=93.159.123.181 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=52 ID=36055 DF PROTO=TCP SPT=65109 DPT=22 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T19:13:14.364916-04:00 nostromo.teiken.net kernel: [196232.156974] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:
...
show less
Port Scan
๐บ๐ธ
34.26.45.18
09 Aug 2026
rocinante.teiken.net:443 34.26.45.18:53490 - - [09/Aug/2026:18:17:04 -0400] "GET /.gitlab-ci.yml HTT ...
show more
rocinante.teiken.net:443 34.26.45.18:53490 - - [09/Aug/2026:18:17:04 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
rocinante.teiken.net:443 34.26.45.18:53524 - - [09/Aug/2026:18:17:04 -0400] "GET /backend/.env HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
rocinante.teiken.net:443 34.26.45.18:53584 - - [09/Aug/2026:18:17:04 -0400] "GET /config/.env HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
rocinante.teiken.net:443 34.26.45.18:53544 - - [09/Aug/2026:18:17:04 -0400] "GET /.env.example HTTP/1.1" 404 502 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
rocinante.teiken.net:443 34.26.45.18:53496 - - [09/Aug/2026:18:17:04 -0400] "GET /.github/workflows
...
show less
Web App Attack
๐จ๐ณ
180.103.119.98
09 Aug 2026
2026-08-09T17:14:26.873382-04:00 nostromo.teiken.net sshd-session[333193]: pam_unix(sshd:auth): auth ...
show more
2026-08-09T17:14:26.873382-04:00 nostromo.teiken.net sshd-session[333193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root
2026-08-09T17:14:28.635289-04:00 nostromo.teiken.net sshd-session[333193]: Failed password for root from 180.103.119.98 port 51998 ssh2
2026-08-09T17:28:36.925764-04:00 nostromo.teiken.net sshd-session[334165]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root
2026-08-09T17:28:39.652762-04:00 nostromo.teiken.net sshd-session[334165]: Failed password for root from 180.103.119.98 port 51478 ssh2
2026-08-09T17:35:16.481610-04:00 nostromo.teiken.net sshd-session[334693]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.103.119.98 user=root
2026-08-09T17:35:18.453627-04:00 nostromo.teiken.net sshd-session[334693]: Failed password for root from 180.103.119.98 port 60634 ssh2
...
show less
Brute-Force
SSH
๐ณ๐ฑ
91.148.245.81
09 Aug 2026
www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /config.php HTTP/1.1" 4 ...
show more
www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /config.php HTTP/1.1" 404 3462 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50638 - - [09/Aug/2026:13:07:59 -0400] "GET /storage/logs/laravel.log HTTP/1.1" 404 3463 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50654 - - [09/Aug/2026:13:07:59 -0400] "GET /dump.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50630 - - [09/Aug/2026:13:07:59 -0400] "GET /backup.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50670 - - [09/Aug/2026:13:07:59 -0400] "GET /database.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50638 - - [09/Aug/2026:13:07:59 -0400] "GET /database_backup.sql HTTP/1.1" 404 510 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50654 - - [09/Aug/2026:13:07:59 -0400] "GET /wp-config.php HTTP/1.1" 404 510 "-" "Go-http-client/1.1"
www.teiken.net:443 91.148.245.81:50638 - - [09/A
...
show less
Web App Attack
๐ฎ๐น
2.193.0.222
09 Aug 2026
2026-08-09T10:29:59.814442-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root ...
show more
2026-08-09T10:29:59.814442-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
2026-08-09T10:30:03.213069-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
2026-08-09T10:30:05.124858-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
2026-08-09T10:30:08.027380-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
2026-08-09T10:30:11.896781-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
2026-08-09T10:30:15.585330-04:00 nostromo.teiken.net sshd-session[303335]: Failed password for root from 2.193.0.222 port 34862 ssh2
...
show less
Brute-Force
SSH
๐ธ๐ฌ
35.197.155.163
09 Aug 2026
2026-08-09T10:00:18.318542-04:00 rocinante.teiken.net kernel: [172862.095286] syn_limit:IN=ens5 OUT= ...
show more
2026-08-09T10:00:18.318542-04:00 rocinante.teiken.net kernel: [172862.095286] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=10827 DF PROTO=TCP SPT=39420 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T10:00:18.318738-04:00 rocinante.teiken.net kernel: [172862.096509] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=62186 DF PROTO=TCP SPT=39476 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T10:00:18.318774-04:00 rocinante.teiken.net kernel: [172862.097957] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=35.197.155.163 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=1526 DF PROTO=TCP SPT=39458 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T10:00:18.318808-04:00 rocinante.teiken.net kernel: [172862.100722] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a
...
show less
Port Scan
๐ฉ๐ช
206.81.24.74
09 Aug 2026
2026-08-09T09:19:37.131657-04:00 nostromo.teiken.net kernel: [160615.277045] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T09:19:37.131657-04:00 nostromo.teiken.net kernel: [160615.277045] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=15112 DF PROTO=TCP SPT=33610 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:38.155081-04:00 nostromo.teiken.net kernel: [160616.300452] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=15113 DF PROTO=TCP SPT=33610 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:41.136374-04:00 nostromo.teiken.net kernel: [160619.281729] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=206.81.24.74 DST=173.52.106.128 LEN=60 TOS=0x08 PREC=0x20 TTL=54 ID=4943 DF PROTO=TCP SPT=33614 DPT=443 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:42.158006-04:00 nostromo.teiken.net kernel: [160620.301979] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a
...
show less
Port Scan
๐ฌ๐ง
209.97.180.8
09 Aug 2026
2026-08-09T09:19:35.770665-04:00 nostromo.teiken.net kernel: [160613.916058] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T09:19:35.770665-04:00 nostromo.teiken.net kernel: [160613.916058] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7543 DF PROTO=TCP SPT=44154 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:36.776724-04:00 nostromo.teiken.net kernel: [160614.922108] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=7544 DF PROTO=TCP SPT=44154 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:39.830565-04:00 nostromo.teiken.net kernel: [160617.975918] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=209.97.180.8 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=54 ID=18500 DF PROTO=TCP SPT=44156 DPT=80 WINDOW=64240 RES=0x00 SYN URGP=0
2026-08-09T09:19:40.840447-04:00 nostromo.teiken.net kernel: [160618.985792] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e
...
show less
Port Scan
๐บ๐ธ
34.173.72.86
09 Aug 2026
www.teiken.org:443 34.173.72.86:59470 - - [09/Aug/2026:08:48:35 -0400] "GET /.env.bak HTTP/1.1" 404 ...
show more
www.teiken.org:443 34.173.72.86:59470 - - [09/Aug/2026:08:48:35 -0400] "GET /.env.bak HTTP/1.1" 404 567 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
www.teiken.org:443 34.173.72.86:59494 - - [09/Aug/2026:08:48:35 -0400] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 4507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
www.teiken.org:443 34.173.72.86:59498 - - [09/Aug/2026:08:48:35 -0400] "GET /.env HTTP/1.1" 404 4508 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
www.teiken.org:443 34.173.72.86:59478 - - [09/Aug/2026:08:48:35 -0400] "GET /.gitlab-ci.yml HTTP/1.1" 404 4507 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
www.teiken.org:443 34.173.72.86:59504 - - [09/Aug/2026:08:48:35 -0400] "GET /.gitco
...
show less
Web App Attack
๐ง๐ช
34.34.185.169
09 Aug 2026
2026-08-09T06:14:57.878033-04:00 nostromo.teiken.net kernel: [149536.130680] syn_limit:IN=en-wan OUT ...
show more
2026-08-09T06:14:57.878033-04:00 nostromo.teiken.net kernel: [149536.130680] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=56777 DF PROTO=TCP SPT=29128 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T06:14:57.878472-04:00 nostromo.teiken.net kernel: [149536.130725] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x00 TTL=60 ID=25049 DF PROTO=TCP SPT=29302 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T06:14:57.878584-04:00 nostromo.teiken.net kernel: [149536.130788] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.34.185.169 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=7655 DF PROTO=TCP SPT=29320 DPT=443 WINDOW=42600 RES=0x00 SYN URGP=0
2026-08-09T06:14:57.878667-04:00 nostromo.teiken.net kernel: [149536.130813] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:8
...
show less
Port Scan